The vulnerability CVE-2024-54413 affects the brandt-net Display Future Posts plugin, specifically versions up to 0.2.3. It is a CSRF vulnerability that enables stored XSS attacks. The CVSS 3.1 base score is 7.1, indicating high severity, with network attack vector, low attack complexity, no privileges required, user interaction required, and scope changed. The impact includes partial loss of confidentiality, integrity, and availability. No patch or mitigation details are currently available from the vendor or other sources.

Successful exploitation of this vulnerability could allow an attacker to execute stored XSS attacks via CSRF, potentially leading to unauthorized actions performed in the context of an authenticated user. This can result in partial compromise of confidentiality, integrity, and availability of the affected system or user data. There are no known active exploits reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or limiting use of the Display Future Posts plugin to reduce exposure. Implementing standard CSRF protections and input sanitization may help mitigate risk, but no vendor-provided mitigation is confirmed.